Route Origin Authorization
$ rpki-client -vvf rpki.cnnic.cn/rpki/A9162E3D0000/137/nRMMGL4o5UPIk3Eqyy_isc9hlWE.roa
File: nRMMGL4o5UPIk3Eqyy_isc9hlWE.roa (raw, json)
Hash identifier: b3lAqOeu3muZNTOxlAty2iEEmziTXj7UcAY5wjQei44=
Subject key identifier: 9D:13:0C:18:BE:28:E5:43:C8:93:71:2A:CB:2F:E2:B1:CF:61:95:61
Certificate issuer: /CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Certificate serial: 6B60
Authority key identifier: BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
Authority info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
Subject info access: rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nRMMGL4o5UPIk3Eqyy_isc9hlWE.roa
Signing time: Fri 13 Jun 2025 10:12:22 +0000
ROA not before: Fri 13 Jun 2025 10:12:22 +0000
ROA not after: Fri 03 Apr 2026 08:00:09 +0000
asID: 24426
IP address blocks: 43.239.48.0/22 maxlen: 22
43.246.0.0/22 maxlen: 22
43.246.4.0/22 maxlen: 22
43.246.12.0/22 maxlen: 22
43.246.16.0/22 maxlen: 22
43.246.20.0/22 maxlen: 22
43.246.24.0/22 maxlen: 22
43.246.28.0/22 maxlen: 22
43.246.32.0/22 maxlen: 22
43.246.36.0/22 maxlen: 22
43.246.40.0/22 maxlen: 22
43.246.44.0/22 maxlen: 22
43.246.52.0/22 maxlen: 22
43.246.56.0/22 maxlen: 22
43.246.60.0/22 maxlen: 22
43.246.64.0/22 maxlen: 22
43.246.68.0/22 maxlen: 22
43.246.72.0/22 maxlen: 22
43.246.76.0/22 maxlen: 22
43.246.80.0/22 maxlen: 22
43.246.84.0/22 maxlen: 22
43.246.88.0/22 maxlen: 22
43.246.92.0/22 maxlen: 22
43.246.96.0/22 maxlen: 22
103.35.48.0/22 maxlen: 22
103.236.0.0/22 maxlen: 22
103.236.4.0/22 maxlen: 22
103.236.8.0/22 maxlen: 22
103.236.12.0/22 maxlen: 22
103.236.16.0/22 maxlen: 22
103.236.20.0/22 maxlen: 22
103.236.28.0/22 maxlen: 22
103.236.32.0/22 maxlen: 22
103.236.36.0/22 maxlen: 22
103.236.40.0/22 maxlen: 22
103.236.44.0/22 maxlen: 22
103.236.48.0/22 maxlen: 22
103.236.52.0/22 maxlen: 22
103.236.56.0/22 maxlen: 22
103.236.60.0/22 maxlen: 22
103.236.64.0/22 maxlen: 22
103.236.68.0/22 maxlen: 22
103.236.72.0/22 maxlen: 22
103.236.76.0/22 maxlen: 22
103.236.80.0/22 maxlen: 22
103.236.84.0/22 maxlen: 22
103.236.88.0/22 maxlen: 22
103.236.92.0/22 maxlen: 22
103.236.96.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27488 (0x6b60)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BDEBED8640CBA6593DA9F9A3DD228D38912458EA
Validity
Not Before: Jun 13 10:12:22 2025 GMT
Not After : Apr 3 08:00:09 2026 GMT
Subject: CN=9D130C18BE28E543C893712ACB2FE2B1CF619561
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:00:04:93:47:28:50:65:00:3a:40:7c:fa:af:
c6:1a:fc:cb:95:d4:ad:0c:ef:54:cf:c7:2d:50:f4:
57:60:8b:ff:be:25:25:ff:df:63:01:52:75:4d:d5:
8c:84:5d:bc:39:43:60:db:b2:f1:5e:ce:a6:23:09:
91:5d:cb:47:61:c8:02:a2:7c:ad:58:a9:67:83:27:
6f:75:33:ad:c7:73:e1:bc:29:a3:38:7e:f7:84:9f:
1a:0a:25:cb:01:7c:c8:3f:0d:85:1e:01:62:55:b0:
0d:d5:d2:2e:a2:26:50:d5:20:dc:55:20:09:c9:6c:
7d:7c:12:76:cb:36:0b:cd:33:8b:2a:a4:74:c1:7f:
69:5e:94:fd:ad:f9:17:a1:ba:43:af:da:3b:c4:7e:
82:10:7f:ee:ee:d0:9f:48:fb:94:bc:91:dd:26:00:
b5:91:85:86:56:57:03:26:85:89:b0:07:99:d3:8b:
39:79:93:70:e3:f1:8a:a4:45:ac:bb:30:1b:b0:b4:
13:a8:67:7e:4b:08:50:9b:35:9a:9d:c9:f8:04:c7:
7d:f0:12:d7:98:bd:50:7c:f2:54:15:d7:c4:c8:b1:
40:82:92:0e:3c:f5:85:7f:05:78:b9:14:e1:93:02:
fa:ad:95:07:a0:25:0d:34:29:93:7a:91:72:0f:f6:
0c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:13:0C:18:BE:28:E5:43:C8:93:71:2A:CB:2F:E2:B1:CF:61:95:61
X509v3 Authority Key Identifier:
keyid:BD:EB:ED:86:40:CB:A6:59:3D:A9:F9:A3:DD:22:8D:38:91:24:58:EA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/vevthkDLplk9qfmj3SKNOJEkWOo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/vevthkDLplk9qfmj3SKNOJEkWOo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki.cnnic.cn/rpki/A9162E3D0000/137/nRMMGL4o5UPIk3Eqyy_isc9hlWE.roa
RPKI Notify - URI:https://rpki.cnnic.cn/rrdp/notify.xml
sbgp-ipAddrBlock: critical
IPv4:
43.239.48.0/22
43.246.0.0/21
43.246.12.0-43.246.47.255
43.246.52.0-43.246.99.255
103.35.48.0/22
103.236.0.0-103.236.23.255
103.236.28.0-103.236.99.255
Signature Algorithm: sha256WithRSAEncryption
6a:9e:fd:2a:1a:4d:c8:ac:40:2e:d9:f2:48:29:ae:8a:81:35:
69:6a:fd:73:df:5f:9e:92:fc:d7:14:79:c7:1f:77:d4:41:ad:
da:d0:ac:88:c1:54:da:3e:5b:ce:e1:8b:52:84:a6:c8:41:58:
c7:e8:e9:ca:a0:14:10:32:17:4a:8d:85:1a:14:27:2b:fe:ed:
00:26:0b:6b:2c:3c:2c:27:93:08:d8:68:b7:3e:8e:61:52:a4:
4e:19:9b:68:b0:12:22:48:83:6d:42:e0:01:78:62:5d:1a:39:
2a:96:85:1c:91:aa:79:bb:8a:3e:04:42:8e:2c:0f:64:65:a2:
4d:e0:41:ff:18:d7:80:a2:ba:13:3a:97:7c:62:d0:ae:16:79:
ce:8b:05:9a:97:3e:66:7b:53:b6:49:d5:8c:8a:58:ff:d0:89:
5b:4b:4e:74:b8:74:86:26:e8:d3:79:1e:b6:82:65:42:da:e1:
59:b0:eb:bd:e4:6a:49:08:65:1a:48:70:35:33:8f:8a:8d:75:
63:95:2c:5f:3f:06:95:6d:27:39:56:f7:67:14:33:d1:99:86:
82:75:d5:7e:47:46:de:40:34:9a:7a:be:d0:e6:62:b1:8c:1b:
60:8f:87:6c:a2:f7:c5:76:52:34:a6:c1:c1:fd:68:87:dc:19:
8a:6c:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 15 10:25:30 2025 by rpki-client